Sprague and Jackson data breach
Sprague and Jackson, an Indiana professional services firm, reported a data breach on May 26, 2026, stemming from an incident on September 22, 2025. This breach exposed highly sensitive client information, increasing the risk of financial fraud and identity theft for those affected. Individuals who received a notification letter should understand their potential next steps.
Docket sheet
- Company
- Sprague and Jackson
- Venue
- Indiana Attorney General
- Filed
- May 26, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredSeptember 22, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralMay 26, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Financial Account Number
- Routing Number
- Tax and Income Information
- Confidential Legal Documents
- Home Address
- Phone Number
Clerk's notes
Sprague and Jackson, a firm specializing in professional services and legal consulting, has formally reported a data breach to regulators. The incident, which occurred on September 22, 2025, became public with a regulatory filing on May 26, 2026. The firm’s status as a central repository for vast amounts of highly confidential client data made it a target for unauthorized access.
Investigations indicate that the breach compromised a critical range of sensitive personal and financial information. The exposed data types include Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Tax and Income Information, Confidential Legal Documents, Home Address, and Phone Number. The exposure of such comprehensive data can lead to severe and long-lasting risks for individuals.
As a custodian of private client data, Sprague and Jackson was obligated to implement robust security measures to protect this information. The occurrence of an unauthorized data exposure suggests that necessary safeguards may not have been sufficient to prevent the intrusion. In professional services, such breaches can stem from sophisticated cyberattacks targeting sensitive legal and financial infrastructure.
For those who received a data breach notification letter from Sprague and Jackson, this serves as official confirmation that your sensitive information was impacted. This notification is important for understanding your rights, as the increased risk of future harm and loss of privacy can be considered an actionable injury. It is not always necessary to demonstrate direct financial loss to seek a review.
If you received a notification regarding the Sprague and Jackson data breach, you may be eligible to have your case reviewed. Understanding the specific details of your exposure is a crucial first step in determining any potential legal avenues. Consider seeking a free case review to assess your individual situation.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.